Four hours is a good cushion.
But ORD can go totally sideways with thunderstorms, so I agree there is some measure of risk. The only truly safe approach would be to come in the night before.
I've booked two hours at ORD for a similar connection and it worked out fine. You just never know for sure.